p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp4_update_56 vulnerabilities

Vulnerability published for kernel-livepatch-sle15-sp4_update_56 in the last 30 days: 1. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 5

  1. SUSE-SU-2026:4856-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).

    • Update to 7-150400.2.1
    Published Updated
  2. SUSE-SU-2026:4259-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).

    • Update to 5-150400.2.1
    Published Updated
  3. SUSE-SU-2026:3734-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1253437 bsc#1270023 bsc#1270024). - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). - CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1267625). - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).

    • Update to 4-150400.2.1
    Published Updated
  4. SUSE-SU-2026:3009-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662). - CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).

    • Update to 2-150400.2.1
    Published Updated
  5. SUSE-SU-2026:2638-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416). - CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531). - CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663). - CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993). - CVE-2026-31613: smb:

    • Update to 1-150400.9.3.2
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →